This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DROi7Rp35sbr_86r7xv563blIMY.roa File: DROi7Rp35sbr_86r7xv563blIMY.roa (raw, json) Hash identifier: 7tFkBPwhrQlBuEG6rIRbYO1U6Y/jsLvlcfB6EpkaFjw= Subject key identifier: 0D:13:A2:ED:1A:77:E6:C6:EB:FF:CE:AB:EF:1B:F9:EB:76:E5:20:C6 Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D21042633EEB095D6E10AF5A506E4 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DROi7Rp35sbr_86r7xv563blIMY.roa Signing time: Fri 02 Jan 2026 06:20:13 +0000 ROA not before: Fri 02 Jan 2026 06:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58098 IP address blocks: 46.107.226.0/23 maxlen: 24 46.107.228.0/24 maxlen: 24 46.107.229.0/24 maxlen: 24 46.107.230.0/24 maxlen: 24 46.107.231.0/24 maxlen: 24 46.107.232.0/23 maxlen: 23 78.92.231.0/24 maxlen: 24 78.92.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:21:04:26:33:ee:b0:95:d6:e1:0a:f5:a5:06:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0d13a2ed1a77e6c6ebffceabef1bf9eb76e520c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a5:f9:ad:64:55:4b:4b:be:21:ba:c0:01:1a: fa:5a:af:06:68:d0:0d:fa:64:8d:a1:41:c6:f5:21: 5a:ec:80:05:e0:df:dc:4e:00:df:3a:d3:aa:8e:1d: 9f:7d:8e:ae:d7:53:d0:2e:e6:86:41:70:3d:c4:cf: b9:d9:d0:dc:5e:cf:55:f1:00:2c:06:aa:6c:ee:0f: d9:1b:cb:03:2c:d0:9b:5a:c9:4c:77:cd:5d:07:c4: 74:90:44:c8:1a:c5:8d:77:e4:9a:d9:87:06:c3:01: cd:c8:71:53:79:9f:59:68:ae:29:d3:47:f8:cb:80: 24:1b:1a:82:08:b5:58:3e:35:a3:1e:c0:f1:5e:fa: 09:b6:e1:dc:37:4f:85:69:f1:47:57:e5:ab:34:2f: 9d:74:b9:2a:4f:50:7c:31:62:50:1e:72:cd:40:2a: 0a:60:3c:61:1a:71:a8:79:55:41:6b:a3:73:23:cb: 14:80:bb:60:a7:df:35:36:55:45:93:e5:15:7a:1c: d7:57:cb:b1:e4:29:04:ed:fd:85:44:43:17:be:16: 9f:f9:da:90:26:08:b4:59:59:64:ff:0f:09:cb:0f: 11:96:38:e4:83:c9:2e:cc:30:1c:5b:3e:d4:2c:7d: 9a:ae:56:18:08:ec:98:5c:e6:6d:48:84:25:ef:5c: 02:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:13:A2:ED:1A:77:E6:C6:EB:FF:CE:AB:EF:1B:F9:EB:76:E5:20:C6 X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/DROi7Rp35sbr_86r7xv563blIMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.107.226.0-46.107.233.255 78.92.231.0/24 78.92.234.0/24 Signature Algorithm: sha256WithRSAEncryption 78:ab:23:ff:92:3a:fe:22:61:dc:fc:b7:d4:5b:c6:89:a3:04: ca:84:ca:96:0f:e3:d1:14:ec:de:60:7c:ee:dc:f4:da:3f:ef: 17:e2:5a:5f:d4:2b:e3:64:a1:a2:0c:59:6c:ff:8d:e8:ba:d6: ee:33:a6:7d:4a:02:43:ef:2d:2a:b3:03:88:47:bf:9f:77:1a: 26:be:ba:1f:48:9a:63:a0:fe:37:83:2a:c8:f5:26:21:a4:5e: c3:4b:00:3d:07:f5:aa:52:78:54:0e:e9:6d:e0:aa:a6:19:d8: b3:aa:9a:70:e8:32:b7:a0:c1:1e:11:42:ac:6f:87:f9:9a:2f: 32:87:d3:a9:17:72:10:91:cf:ce:95:49:a6:e4:92:10:e7:b8: f3:e6:c6:5e:79:03:e9:3b:0f:34:c3:49:64:8a:3a:81:a3:b4: b8:cb:05:a1:3e:e2:56:38:a5:d7:69:89:98:b7:b7:3c:5b:23: 86:0f:2c:06:b1:78:27:b9:04:90:09:6b:37:34:0c:f0:02:72: 79:e8:f1:e6:f9:a3:d7:fb:49:1a:0b:55:dc:c0:f6:84:42:7e: 36:20:16:c0:40:38:2f:64:b4:3a:91:42:56:f9:a6:2c:16:a2: 5a:52:9a:87:0d:ef:db:ea:44:9e:16:8c:f2:90:a9:34:04:d6: 70:4d:9a:85 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XSEEJjPusJXW4Qr1pQbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDEzYTJlZDFhNzdlNmM2ZWJmZmNlYWJlZjFiZjllYjc2ZTUyMGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKX5rWRVS0u+IbrAARr6Wq8GaNAN +mSNoUHG9SFa7IAF4N/cTgDfOtOqjh2ffY6u11PQLuaGQXA9xM+52dDcXs9V8QAs Bqps7g/ZG8sDLNCbWslMd81dB8R0kETIGsWNd+Sa2YcGwwHNyHFTeZ9ZaK4p00f4 y4AkGxqCCLVYPjWjHsDxXvoJtuHcN0+FafFHV+WrNC+ddLkqT1B8MWJQHnLNQCoK YDxhGnGoeVVBa6NzI8sUgLtgp981NlVFk+UVehzXV8ux5CkE7f2FREMXvhaf+dqQ Jgi0WVlk/w8Jyw8Rljjkg8kuzDAcWz7ULH2arlYYCOyYXOZtSIQl71wClQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFA0Tou0ad+bG6//Oq+8b+et25SDGMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvRFJPaTdScDM1c2JyXzg2cjd4djU2M2JsSU1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAEua+ID BAEua+gDBABOXOcDBABOXOowDQYJKoZIhvcNAQELBQADggEBAHirI/+SOv4iYdz8 t9RbxomjBMqEypYP49EU7N5gfO7c9No/7xfiWl/UK+NkoaIMWWz/jei61u4zpn1K AkPvLSqzA4hHv593Gia+uh9ImmOg/jeDKsj1JiGkXsNLAD0H9apSeFQO6W3gqqYZ 2LOqmnDoMregwR4RQqxvh/maLzKH06kXchCRz86VSabkkhDnuPPmxl55A+k7DzTD SWSKOoGjtLjLBaE+4lY4pddpiZi3tzxbI4YPLAaxeCe5BJAJazc0DPACcnno8eb5 o9f7SRoLVdzA9oRCfjYgFsBAOC9ktDqRQlb5piwWolpSmocN79vqRJ4WjPKQqTQE 1nBNmoU= -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:43 2026 by rpki-client